[Ben Greear <greearb@xxxxxxxxxxxxxxx>]

Guy Harris wrote:
> 
> > It took me quite a while today to actually get ethereal working.
> > The problem was that I had to enter a filter, or it would capture
> > nothing.  In retrospect, this is not too un-reasonable,
> 
> No, it's completely unreasonable.  A blank filter *should* mean "capture
> everything", not "capture nothing".
> 
> It's also completely *unintentional*; it's also almost certainly due to
> a bug in your OS - you're probably running Red Hat Linux 6.1, or a
> derivative thereof, or perhaps SuSE 6.3 (which may have a
> similarly-"improved" libpcap), or some other Linux with a
> similarly-"improved" libpcap.  On other platforms, a blank filter *does*
> mean "capture everything".

I'm running RH 6.1  I did install a libpcap RPM from you site (so I could compile), but
that didn't seem to help anything.  There's no telling what other
wierd stuff I have on my computer..as I have hacked around with the
libpcap stuff before, to add (lame)VLAN tagging to it... (tcpdump does work as expected though..)

> 
> 0.8.1 will have a workaround for that bug.

Cool :)

-- 
Ben Greear (greearb@xxxxxxxxxxxxxxx)  http://scry.wanfear.com/~greear 
Author of ScryMUD:  scry.wanfear.com 4444        (Released under GPL)
http://scry.wanfear.com